CVE-2019-12977

HIGH

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.

Affects 1 product across 1 vendor.

CVSS 3.07.8
EPSS1.9%
Percentile79th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity, no authentication required, requires user interaction, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-665: CWE-665
Related Attack Patterns (CAPEC)
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
via CWE-665
CAPEC-26 Leveraging Race Conditions
via CWE-665

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2019. A high severity vulnerability affects Imagemagick systems (CVE-2019-12977). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2019-GLOBAL-208761-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2019-12977?
This vulnerability was disclosed in 2019. A high severity vulnerability affects Imagemagick systems (CVE-2019-12977). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2019-12977?
CVE-2019-12977 has CVSS 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS: 1.9%.
Is CVE-2019-12977 actively exploited?
No confirmed active exploitation of CVE-2019-12977 as of 2026-05-30.
How do I remediate CVE-2019-12977?
Priority: MEDIUM.
What systems are affected by CVE-2019-12977?
CVE-2019-12977 affects Imagemagick Imagemagick.
Vulnerability Details
CVE IDCVE-2019-12977
BSIDBS-2019-GLOBAL-208761-H BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published2019-06-26
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
CWE-665
SourceNVD
Official Description

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Imagemagick Imagemagick 7.0.8-34
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2668 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hasha32cf8b879e781d0f090f6aef7262dd8e6243e534521e80396e7222c14cb7979115d3b4f369bca0b86e852fce36283a24a3473ab5d4897895e0f297b603be7b4
Related CVEs affecting Imagemagick
CVE-2004-0981 10.0 Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allow... CVE-2014-9847 9.8 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an uns... CVE-2014-9846 9.8 Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6... CVE-2016-10145 9.8 Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to ha... CVE-2018-14551 9.8 The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an un...
View all Imagemagick CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →